1. Forum
  2. FidoNet
  3. SYNC PROGRAMMING

  • src/syncterm/coverity-cids.txt

    From Deucе@1:103/705 to Git commit to main/sbbs/master on Tue Aug 11 11:04:02 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/4cd3cb12f87992f03733f979
    Modified Files:
    src/syncterm/coverity-cids.txt
    Log Message:
    syncterm: triage bounded DECRQSS strings (CID 503211)

    Record that the foreground and background truecolor strings originate in the fixed 256-byte sequence buffer and cannot overflow the 3072-byte response buffer.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Deucе@1:103/705 to Git commit to main/sbbs/master on Wed Aug 12 13:22:30 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/899d2dd149a1d740fc8d4c30
    Modified Files:
    src/syncterm/coverity-cids.txt
    Log Message:
    Coverity: triage builder allocation false positives (CIDs 505444, 505448)

    Successful builder append operations allocate the backing buffer before later appends, so the reported null flows are infeasible.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Deucе@1:103/705 to Git commit to main/sbbs/master on Thu Aug 13 10:31:56 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/041dfd2f67eef95c78ca07e8
    Modified Files:
    src/syncterm/coverity-cids.txt
    Log Message:
    Coverity: close SFTP INIT findings (CIDs 106519, 464917)

    Remove CID 106519 after the current scan no longer returns it. Classify CID 464917 as a false positive because the fully buffered packet is capped at 256 KiB and every extension iteration consumes two bounds-checked strings or stops.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)